Technical Tip: Explaining the 'honor-df' global se...

lbruno · 06-07-2021

Description This article describes how to explain why the user defined FQDN Wildcards may not be working as expected.It is possible that a scenario where an FQDN Wildcard object is created and although it is used in a firewall policy, the traffic is ...

lbruno · 05-05-2021

DescriptionThis article describes why and which FortiGates models do not support Virtual Routing Forward (VRFs).SolutionVRF is only available on kernel 3.2 which equips most of our current FortiGate models but small boxes such as FortiGate 60D or For...

lbruno · 04-01-2021

Description This article describes the behavior of the 'honor-df' global setting: config system global set honor-df enable/disable <- Enabled by default. set hostname "FGT1" set timezone 04end DF stands for 'Don't Fragment' Flag. When enabled, it hon...

lbruno · 02-04-2021

DescriptionThis article describes a particularity of Virtual Wire Pairs when traffic going through a VWP wants to go back into the same FortiGate via a non-VWP interface.SolutionImagine a scenario where a user has a normal LAN to Internet NATed acces...

lbruno · 04-17-2015

Description This article describes how to configure a FortiGate for NetFlow.NetFlow is a feature that provides the ability to collect IP network traffic as it enters or exits an interface. By analyzing the data provided by NetFlow, a network administ...

User Statistics

User Activity

Technical Tip: FQDN Wildcard address is not resolved when using it in Firewall Policies

Technical Tip: VRFs not supported for specific kernel versions